eb1b71fe67369083ed2dc65f3a29ce26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb1b71fe67369083ed2dc65f3a29ce26_JaffaCakes118
Size

76KB
MD5

eb1b71fe67369083ed2dc65f3a29ce26
SHA1

e73559c70c9a8366c530f42018aa8bb1058aed08
SHA256

223c627ca76455a0ac5aec575d2fa2b48d3c414f792ccb9b7e1b0ed8b19c270c
SHA512

a39925857401e639c0bb85e09e7bd3d00fa14d625356909168987c9e6a1bbcaa7b2dcd0efe8828f8db036003037d1c0845313551c2b64318d6f6840f3cf49f17
SSDEEP

1536:7r1A6FITNivaOMnfGuRi/fBHUMgnlhD+6EA5hjmvJA/gkpIxdFwN4:7JHmTNivaV9CfBHU3PD+6zavWXpIxdFD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb1b71fe67369083ed2dc65f3a29ce26_JaffaCakes118

Files

eb1b71fe67369083ed2dc65f3a29ce26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbdc71b2013dddcbbb657b0a2f39023a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
DeleteTimerQueue
WriteConsoleInputVDMW
RegisterConsoleVDM
Toolhelp32ReadProcessMemory
FindNextChangeNotification
MoveFileExW
GlobalMemoryStatusEx
VirtualFree
SetDefaultCommConfigA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE